/settings/privacy is the only DPDP settings route

Decision

/settings/privacy is the single DPDP hub: bulk export, document list, consent toggles, grievance officer, data location and quick delete. There is no /settings/data sub-route.

Why

Export and deletion fit as cards on the hub, so a second route added nothing. The hub still matches the privacy wireframe.

Impact

• apps/website/src/app/(app)/settings/ has privacy/ and no data/.
• Cards under components/settings/privacy/: PrivacyBulkActionsCard (export), PrivacyQuickDeleteCard (delete), DpdpConsentCard, GrievanceOfficerCard, DataLocationCard, RefundWindowCard.
• Deletion messaging stays as in 2026-06-10-account-deletion-messaging.
• Affects settings-privacy-data and infra-sub-processors.

Status

Active. Replaces 2026-06-01-privacy-settings-reconciliation.

Sources

• apps/website/src/app/(app)/settings/privacy/page.tsx
• apps/website/src/components/settings/privacy/